103 matches found
impacket
Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...
MSSQL-Pentest-Cheatsheet
🗄️ Шпаргалка по пентесту MSSQL Практическая шпаргалка по тестированию на проникновение Microsoft SQL Server, предназначенная для пентестеров, специалистов Red Team и обучающихся кибербезопасности, чтобы понять, как перечислять, эксплуатировать и использовать неправильно сконфигурированные базы...
mssql-command-tool
Инструмент подключения к терминалу mssql | выполнение команд Пример ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...
cve-2024-50330-ivanti_epm_sqli_reproduction
CVE-2024-50330: Ivanti Endpoint Manager EPM SQL 인젝션을 통한 RCE 개요 CVE-2024-50330은 Ivanti Endpoint Manager EPM의 치명적인 인증 전 SQL 인젝션 취약점으로, 원격의 인증되지 않은 공격자가 대상 서버에서 원격 코드 실행을 달성할 수 있게 합니다. 이 취약점은 2024년 11월 보안 업데이트에서 공개 및 패치되었습니다. 기술적 세부 사항 CVE : CVE-2024-50330 CWE : CWE-89 SQL 인젝션 CVSS : 치명적 CVSS 3.x 점수...
EUVD-2024-55767
Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to...
CVE-2024-58385: Improper Neutralization of Special Elements used in an SQL Command
Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to...
PT-2026-92120
Name of the Vulnerable Software and Affected Versions Yonyou U8 CRM affected versions not specified Description An unauthenticated SQL injection exists in the 'fillbacksettingedit.php' endpoint. By using the DontCheckLogin=1 parameter, authentication is bypassed, and the id parameter is...
VulnCheck KEV: CVE-2024-58385
Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to...
CVE-2026-9551
CVE-2026-9551 affects Das Parking Management System 6.2.0. The vulnerability resides in the API Endpoint’s ParkingRecord/ExportParkingRecords function, specifically the xp_cmdshell component, where manipulating the Value argument causes a SQL injection. It is exploitable remotely and the exploit ...
EUVD-2026-31827
A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xpcmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack...
CVE-2026-9551: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xpcmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack...
CVE-2018-25272
ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands v...
CVE-2018-25272 ELBA5 5.8.0 Remote Code Execution via Database Access
ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands v...
CVE-2018-25272
ELBA5 5.8.0 contains a Remote Code Execution vulnerability via database access. The issue allows an attacker to obtain database credentials, decrypt the DBA password, and run commands with SYSTEM-level permissions. Exploitation could occur by connecting with default connector credentials and usin...
CVE-2018-25272: Inadequate Encryption Strength
ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to the database using default connector credentials, decrypt the DBA password, and execute commands v...
EUVD-2020-4908
Malware in sbrugna...
EUVD-2022-46978
Malicious code in bioql PyPI...
EUVD-2022-46701
Malicious code in bioql PyPI...
CVE-2023-47261
Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync //gettingstarted request contains a connection string for privileged SQL Server database access, and xpcmdshell can be enabled...
Microsoft SQL Server Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server Command Execution', 'Description' = %q This module will execute a Windows command on a MSSQL/MSDE instance via the xpcmdshel...